5 matches found
EUVD-2022-24995
Malicious code in bioql PyPI...
EUVD-2023-58630
Malicious code in bioql PyPI...
CVE-2023-34750
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at admin/index.php?mode=settings=projects=edit...
CVE-2024-6857
The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating its Header, Footer and Body Script Settings, which could allow attackers to make logged admins perform such action via a CSRF attack...
CVE-2024-10480
The 3DPrint Lite WordPress plugin, in versions prior to 2.1 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack. The root cause is a lack of CSRF checks when updating plugin settings, which could allow an attacker to force a logged-in administrator to modify those settings unknowingly. ...